---
schema_version: "1"
id: c0dc107cab0e9debb61d5b53f205cdbb73417f6dc96a92123f8c717c31e0d276
title: Set Up an Authentication Provider for Single Sign-On
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/security/headless-identity-impl-guide/guides/headless-identity/headless-identity-auth-provider.md
canonical_url: https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-auth-provider.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 5ec711bddefa0f365beac724dd99a183b1ec87f3714a73a8dccb61cf6e853cc9
products:
  - Headless Identity Implementation Guide
  - Security
---

# Set Up an Authentication Provider for Single Sign-On

Authentication providers are one way of setting up single sign-on (SSO) from an external identity provider, like Google, into Salesforce. With a single parameter, you can link an authentication provider to your app to create an SSO experience that feels native. For this example, we set up a Google authentication provider so that your users can log in to Google from your app.

|Required Editions|
|-----------------|
|Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience|
|Available in: **Enterprise**, **Unlimited**, and **Developer** Editions|

This guide shows you how to create a registration handler, set up an authentication provider, and add it to your Experience Cloud site. This guide doesn’t cover a Postman example for configuring the OAuth 2.0 web server flow or user-agent flow to use the `sso_provider` parameter. For full setup instructions, see [Create a Native Single Sign-On Experience in Your App](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_native_sso.htm&type=5) in Salesforce Help.

-   **[Create an Authentication Provider Registration Handler](https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-auth-provider-registration-handler.md)**  


    Create an Apex registration handler to use with your authentication provider. When users log in to your third-party app with an external single sign-on (SSO) provider, the registration handler creates and updates their user records.

-   **[Configure a Google Authentication Provider](https://developer.salesforce.com/docs/platform/headless-identity-impl-guide/guide/headless-identity-configure-auth-provider.md)**  


    For this example, configure a Google authentication provider so that users can log in with Google.